This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k2WAAZO6m1pRYpUuTZlOAMA0ZM8.roa
File:                     k2WAAZO6m1pRYpUuTZlOAMA0ZM8.roa (raw, json)
Hash identifier:          vpVGrOYM7HxcgXhTys3K7K+lsQbYoGtql7xin3xn3po=
Subject key identifier:   93:65:80:01:93:BA:9B:5A:51:62:95:2E:4D:99:4E:00:C0:34:64:CF
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F8476FD73C374290C810E03D7A7985C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k2WAAZO6m1pRYpUuTZlOAMA0ZM8.roa
Signing time:             Fri 02 Jan 2026 16:22:26 +0000
ROA not before:           Fri 02 Jan 2026 16:22:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62610
IP address blocks:        31.56.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:76:fd:73:c3:74:29:0c:81:0e:03:d7:a7:98:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9365800193ba9b5a5162952e4d994e00c03464cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:6e:88:66:75:fc:3d:d7:6f:3d:e6:25:8f:
                    77:39:2b:f8:01:2d:f1:15:f2:23:e9:f5:c6:f9:4f:
                    2c:3e:d5:0d:8a:b6:f6:cc:93:bb:13:c6:7c:57:77:
                    63:a9:33:59:33:a8:12:35:11:f6:65:11:ea:70:18:
                    c6:79:62:02:d1:84:f2:b5:8b:4d:8e:a0:bc:3b:f9:
                    e4:87:f6:b8:c4:ff:6d:11:83:54:f1:0c:34:57:27:
                    fe:d4:83:2b:2d:47:b8:16:a4:23:b2:78:08:fb:3c:
                    6f:1b:06:8e:6e:50:10:b2:71:71:aa:28:84:ec:e6:
                    db:0c:3c:8b:2c:c4:42:44:47:60:06:10:b0:e9:2a:
                    81:56:eb:6c:d2:7f:73:58:3e:0f:96:22:4d:70:f2:
                    dd:ee:56:f3:d0:4c:77:b6:f4:fb:29:c8:22:f2:d3:
                    21:ec:1a:d5:58:a3:de:89:75:89:7d:7a:f6:ef:1e:
                    8a:47:5d:26:9e:7b:bf:fc:6c:03:fb:54:2c:63:c5:
                    0a:d7:c7:93:34:b1:91:78:1d:ca:08:83:be:ab:2c:
                    f3:a2:78:10:1a:0f:c9:e3:b3:f9:2b:27:ec:7e:54:
                    05:31:85:9f:2e:6e:c5:92:f4:9d:9c:8f:fe:46:b0:
                    9b:f1:85:c9:5a:11:5d:b8:55:dd:78:48:d6:fb:ff:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:80:01:93:BA:9B:5A:51:62:95:2E:4D:99:4E:00:C0:34:64:CF
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k2WAAZO6m1pRYpUuTZlOAMA0ZM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:60:c7:c0:84:93:1f:09:74:43:18:09:7e:ef:7a:2e:b0:
         6d:72:cf:63:84:2b:85:73:63:e1:0f:c9:c6:1e:1a:7d:ca:70:
         42:bd:43:07:24:3e:0b:9f:47:34:be:84:ca:1f:9f:fa:5f:74:
         27:9d:f3:36:b8:1c:ff:7a:bf:e7:48:af:59:b8:c2:2f:68:77:
         6a:9e:38:a2:ed:ad:2b:a1:36:e2:4b:63:88:76:86:fa:01:ec:
         93:fc:fd:f2:e9:98:59:ee:e2:94:0d:a1:c5:1d:0d:ce:81:cf:
         5f:0a:7e:fa:67:f3:b2:ff:dd:17:b9:07:16:e6:4e:38:4a:69:
         6f:9d:11:20:b2:02:f2:65:32:9b:c9:c9:67:db:b0:f4:5e:34:
         f5:69:43:bd:e7:e4:57:54:63:d1:42:a8:29:26:cd:38:dd:44:
         ef:34:2f:43:e7:29:e8:e4:2c:66:a1:9d:d3:1b:6e:c2:48:94:
         56:aa:d2:31:99:fb:b7:34:9f:9c:ef:c8:fa:6b:a7:08:38:ea:
         af:0f:c1:58:20:44:bd:31:f6:34:30:75:1c:29:e1:b1:e0:3b:
         cc:06:cd:85:4f:2b:81:d2:65:39:de:3d:00:f7:8a:1c:35:8e:
         04:1a:12:6b:5a:a6:20:43:16:2d:86:54:05:84:f7:b7:2b:b6:
         ca:e8:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:53 2026 by rpki-client